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Amendment to the Claims: 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

Listing of Claims; 

Claim 1 (currently amended): A gateway network element that provides access 
to network elements that are not directly reachable, comprising: 

a processor that is directed by code; 

code that receives and sends packets over a first IP based interface to a first 
network; 

code that receives and sends packets over a second IP based interface to a 
second network, wherein IP addresses of network elements in the second network are 
not visible to network elements in the first network; 

code that filt e rs out packets receiv e d ov e r th e s e cond IP bas e d interfac e that 
sp e cif th e gat e way network e l e m e nt as a sourc e of the pack e ts; and 

code for categorizing the received packets based on the interface over which the 
packet was received, type of packet, and whether the destination address specifies the 
gateway network element: and 

code that selects and applies a^ifst set of filtering rules to the received p ackets 
based on a category of the received packet, wherein each set of said filtering rules differ 
from said other sets of filtering rules ov e r th e first IP bas e d int e rfac e and a s e cond r. e t of 
filt e ring rul e s to pack e ts r e ceiv e d at th e s e cond IP bas e d interfac e , wher e in said first 
and second s e t of rul e s sp e cific acceptabl e d e stination address e s for the pack e ts; 

wherein the first network is a Data Communications Network (DCN) and the 
second network is a Data Communication Channel (DCC) and the code that applies said 
filtering rules provides separation between the DCN network and the DCC network . 
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Claim 2 (original): The gateway network element of claim 1, further comprising 
code that sends packets over the first IP based interface only when the packets specify 
the gateway network element as the source. 

Claim 3 (original): The gateway network element of claim 1, further comprising 
code that accepts packets received over the first IP based interface if the destination 
address specifies the gateway network element, a subnet broadcast address or a 
multicast address. 

Claim 4 (original): The gateway network element of claim 1, further comprising 
code that implements a proxy server that provides forwarding between IP address of the 
first and second networks. 

Claim 5 (canceled). 
Claim 6 (canceled). 

Claim 7 (currently amended): A gateway network element that provides access 
to network elements that are not directly reachable, comprising: 

a processor that is directed by code; 

means for receiving and sending packets over a first IP based interface to a first 
network; 

means for receiving and sending packets over a second IP based interface to a 
second network, wherein IP addresses of network elements in the second network are 
not visible to network elements in the first network; 
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m e ans for filt e ring out pack e ts r e c e iv e d ov e r th e s e cond IP based int e rface that 
specify th e gat e way n e twork elem e nt as a source of th e pack e ts; and 

means for categorizing the received packets based on the interface over which 
the packet was received, type of packet and whether the destination address specifies 
the gatewav network element; and 

means for selecting and applying a-^rst set of filtering rules to the received 
packets based on a category of the received packet, wherein each set of said filtering 
rules differ fi-om said other sets of filtering rules ov e r th e fir s t IP bas e d int e rface and a 
s e cond s e t of filt e ring rules to pack e ts r e c e iv e d at th e s e cond IP based int e rfac e , 
wh e r e in said first and s e cond s e t of rul e s sp e cific acc e ptabl e d e stination addr e ss es for 
th e pack e ts ; 

wherein the first network is a Data Communications Network (DCN) and the 
second network is a Data Communication Channel (DCC) and the code that applies said 
filtering rules provides separation between the DCN network and the DCC network. 

Claim 8 (currently amended): A method for providing access to network 
elements that are not directly reachable, comprising: 

receiving and sending packets over a first IP based interface to a first network; 

receiving and sending packets over a second IP based interface to a second 
network, wherein IP addresses of network elements in the second network are not 
visible to network elements in the first network; 

filt e ring out pack e ts r e c e iv e d ov e r the s e cond IP bas e d int e rfac e that sp e cif th e 
gat e way n e twork e lem e nt as a source of th e pack e ts; 

categorizing the received packets based on the interface over which the packet 
was received, type of packet, and whether the destination address specifies the gateway 
network element: and 
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selecting and applying a-first set of filtering rules to the received packets based 
on a category of the received packet, wherein each set of said filtering rules differ from 
said other sets of filtering rules ov e r th e first IP bas e d int e rfac e and a second se t of 
filt e ring rul e s to pack e ts rec e iv e d at th e se cond IP bas e d interfac e , wher e in said first 
and s e cond set of rul e s sp e cify acc e ptabl e d e stination addresses for the pack e ts ; 

wherein the first network is a Data Communications Network (DCN) and the 
second network is a Data Communication Channel (DCC) and applying said filtering 
rules provides separation between the DCN network and the DCC network . 

Claim 9 (original): The method of claim 8, fiirther comprising sending packets 
over the first IP based interface that specify the gateway network element as the source. 

Claim 10 (original): The method of claim 8, further comprising accepting 
packets received over the first IP based interface if the destination address specifies the 
gateway network element, a subnet broadcast address or a multicast address. 

Claim 1 1 (original): The method of claim 8, further comprising accepting 
packets received over the second IP based interface if the destination address specifies 
the gateway network element, a network element in the second network or a multicast 
address. 

Claim 12 (original): The method of claim 8, further comprising implementing a 
proxy server that provides forwarding between IP address of the first and second 
networks. 

Claim 13 (canceled). 
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Claim 14 (canceled). 
Claim 15 (canceled). 
Claim 16 (canceled). 
Claim 17 (canceled). 

Claim 18 (previously presented): The gateway network element of claim 1 
further comprising: 

code that accepts packets received over the first IP based interface if the 
destination address specifies the gateway network element, a subnet broadcast address 
or a multicast address; and 

code that accepts packets received over the second IP based interface if the 
destination address specifies the gateway network element, a network element in the 
second network or a multicast address. 

Claim 19 (currently amended): The gateway network element of claim 1 furth e r 
comprising code that applies a third wherein one set of filtering rules filters4 e packets 
received over the first IP based interface with a destination address of the gateway 
network element and- a another se t fourth s e t of filtering rules-t e filters packets received 
at the second IP based interface with a destination address of the gateway network 
element. 
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Claim 20 (canceled). 

Claim 21 (previously presented): The gateway network element of claim 1 
further comprising code that tunnels connections between a client node and a DCC- 
connected network element. 

Claim 22 (canceled). 

Claim 23 (previously presented): The gateway network element of claim 1 
wherein the first network comprises to a Wide Area Network (WAN) and the second 
network comprises a Local Area Network (LAN), 

Claim 24 (new): The gateway network element of claim 7 further comprising 
means for forwarding filtered packets for analysis. 

Claim 25 (new): The gateway network element of claim 7 wherein one set of 
filtering rules filters packets received over the first IP based interface with a destination 
address of the gateway network element and another set of filtering rules filters packets 
received at the second IP based interface with a destination address of the gateway 
network element. 

Claim 26 (new): The gateway network element of claim 7, fiirther comprising 
means for implementing a proxy server that provides forwarding between IP addresses 
of the first and second networks. 



Page 7 of 1 1 



Appl. No. 10/690,182 

Amd. Dated October 27, 2008 

Reply to Office Action of June 26, 2008 

Claim 27 (new): The gateway network element of claim 1 wherein one of said 
categories comprises packets received fi-om the first network and another of said 
categories comprises packets received fi-om the second network. 

Claim 28 (new): The gateway network element of claim 27 wherein one of said 
categories comprises packets addressed to the gateway network element 
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